network
November Patch Tuesday is smaller than October’s record, but the confirmed exploited issue is a Moderate Outlook bug that could disclose authentication…
Crédit Mutuel Arkéa confirmed attackers used a supplier platform to move funds from the bank’s own account. A statement said other institutions potentially allowed conversion to cryptocurrency. Customer assets were not affected.
CISA confirmed active exploitation of WordPress Core flaw CVE-2026-119977 and added it to the KEV catalog. Federal civilian agencies must remediate by November 6, 2026.
mSeven Software emailed current and former mSecure users on November 3, 2026, about suspicious activity. Steps may include password, 2FA, and passkey changes, but the notice does not say whether vaults were accessed.
A supermarket freezer cyberattack warmed store refrigerators to 50C in at least seven European countries, echoing an October attack in France and forcing retailers to discard stock.
Malaysia Airlines says some customer information processed by Amadeus between August 2023 and September 2026 may have been affected. The carrier says its systems were not breached and there was no evidence financial data was accessed.
